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^ (57) Abstract: When a user, who has logged onto an information processing apparatus (100), executes a log-off procedure, a saving 
I/*) part (160) executes the following processings. Firstly, from among the files residing in a data storage part (110), any file that are 
recognized as requiring a security protection and hence are to be saved are copied into an external storage device (300) via a network 
(200), and the original files in the data storage part (110) are then deleted. At this moment, the address of the copy destination is 
stored, as management information, into a mobile information recording medium (400) possessed by the user. When the user logs 
Q onto the information processing 
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DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, HR, HU, 
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LU, LV, MA, MD, MG, MK, MN, MW, MX, MZ, NA, NI, 
NO, NZ, OM, PG, PH, PL, PT, RO, RU, SC, SD, SE, SG, 
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VC, VN, YU, ZA, ZM, ZW. 
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BY, KG, KZ, MD, RU, TJ, TM), 3 — □ V /i (AT, BE, 
BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HU, 
IE, IS, IT, LT, LU, MC, NL, PL, PT, RO, SE, SI, SK, TR), 
OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, ML, 
MR, NE, SN, TD, TG). 



apparatus (100) again, a restoring part (170) restores, based on the management information stored in the mobile information record- 
ing medium (400), the files saved in the external storage device (300) into the data storage part (1 10). In this way, a sufficient security 
can be retained when a plurality of users share a single information processing apparatus. 

(57) mm-. ^mmmmm(ioo)iza^^^^(Do.--if^ncr^-y^m^m^'t^t. wmmmiKieoyz&y &T<Dm 
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i i o&«j£f SEtfcTffH-r&s. — ^ ^^unon ^«hwis i 
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25 fiiigt 1 0 0 t^*ra^ifflJKte*«i«*r« ji t$m\ rn^^j t«> 
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15 ^y^tt, rL-^mmi 4 OfcJ;oTlI$ni)o rL-lfWJI^l 4 0 
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10 

±x\$^nSffi\zte%<D-v, mzu?fjr>vtz.ftm=L~- J $z.ifi, j*^y l 3 01*1 

20 i o^(DmmMMyy^MzMvxwmmm^mnT^m\z, ^ 
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